Addendum

Key Windows Kernel Structures

An object type in Windows includes a predefined structure, management functions, and associated properties. Each instance (like a file, process, thread) corresponds to a specific object type.

_OBJECT_TYPE

Represents the definition of an object type in the Windows kernel.

// 0xd8 bytes (sizeof), src: Vergilius Project
struct _OBJECT_TYPE {
    struct _LIST_ENTRY TypeList;                          // 0x0
    struct _UNICODE_STRING Name;                          // 0x10
    VOID* DefaultObject;                                  // 0x20
    UCHAR Index;                                          // 0x28
    ULONG TotalNumberOfObjects;                           // 0x2c
    ULONG TotalNumberOfHandles;                           // 0x30
    ULONG HighWaterNumberOfObjects;                       // 0x34
    ULONG HighWaterNumberOfHandles;                       // 0x38
    struct _OBJECT_TYPE_INITIALIZER TypeInfo;             // 0x40
    struct _EX_PUSH_LOCK TypeLock;                        // 0xb8
    ULONG Key;                                            // 0xc0
    struct _LIST_ENTRY CallbackList;                      // 0xc8
};